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DETAILED ACTION 

1. This is in response to the amendment filed 10/23/2009. Claims 1, 2, 15, 17 and 22 have 
been amended. Claims 3, 7, 16,21 and 26 have been cancelled. Claims 1, 2, 4-6, 8-15, 17-20 
and 22-25 are pending and have been considered below. 

Response to Amendment 

2. Applicant's amendment filed October 23, 2009 with respect to claims 1, 2, 15, 17 and 
22 has been fully considered and entered. 

Double Patenting 

3. The nonstatutory double patenting rejection has been withdrawn in light of filing of a 
terminal disclaimer. 

Response to Arguments 

4. Applicant argues, "Nowhere does the cited art disclose wherein said single, atomic 
cryptographic instruction prescribes an encryption operation, as is recited in claim 1. Kessler 
certainly does not disclose any form of a single atomic cryptographic instruction, for Kessler 
fails to teach any form instructions for programming a microprocessor. As has been previously 
submitted, Kessler teaches a security co-processor interface. Christie indeed discloses an 
instruction that is atomic, and that is executed on an x86- compatible microprocessor, and 
wherein said x86-compatible microprocessor executes an application program. However, 
Christie entirely fails to teach a single, atomic cryptographic instruction that prescribes an 
encryption operation. Christie's SKINIT instruction is admittedly atomic, however it does not 
prescribe an encryption operation. Rather, Christie's instruction is used to perform various 
initialization functions in a secure execution mode capable microprocessor, and Christie's 
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microprocessor is entirely incapable of performing an encryption operation". This argument is 
not persuasive, first, the examiner agrees with applicant regarding Christie teaching an 
instruction that is atomic, and that is executed on an x86- compatible microprocessor, and 
wherein said x86-compatible microprocessor executes an application program, and second the 
examiner submits that Christie further discloses that a single, atomic cryptographic instruction 
that prescribes an encryption operation (see column 6, lines 35-53). 

5. Applicant argues, "By combining the references, one skilled in the art would be led to 
conclude that the coprocessor of Kessler may be useful in an x86 environment because it could 
offload cryptographic functions which would otherwise have to be performed via operating 
system intensive subroutine calls. That is, one skilled would appreciate that the coprocessor of 
Kessler could be used to offload the x86-compatible microprocessor of Christie for the 
performance of security functions" This argument is not persuasive because cited portions of 
Kessler (Col. 1, line 66 - Col. 2, line 39) do not suggest that the purpose of Kessler' s invention is 
to "offload tasks from the host processor." Instead, Applicant has merely pointed to the 
background of the invention where Kessler describes the use of coprocessors. 

6. Applicant argues, 'for Christie's processor is entirely void of any encryption capability. 
Christie's microprocessor is employed to provide a secure execution environment for trusted 
application programs, not to perform cryptographic operations such as encryption or decryption 
of message blocks'". This argument is not persuasive Christie et al disclose a hash of Security 
Kernel is used to verify the security service processor(column 6, lines 35-53). 
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Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

A patent may not be obtained though the invention is not identically disclosed or described as set forth in section 
102 of this title, if the differences between the subject matter sought to be patented and the prior art are such that 
the subject matter as a whole would have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the manner 
in which the invention was made. 

8. Claims 1, 2, 4-6, 8-15, 17-20, 22-25 rejected under 35 U.S.C. 103(a) as being 
unpatentable over Kessler et al (US 6,789,147) in view of Christie et al (US 7,165,135). 

Claims 1, 17 and 22: Kessler et al disclose an apparatus and a method for performing 

cryptographic operations, comprising: 

An Z86-compatible microprocessor, comprising: 

i. An instruction register within a x86-compatible microprocessor (Fig. 1 , 
item 10) having a single atomic cryptographic instruction disposed therein, 
wherein said single, atomic cryptographic instruction is arranged according to the 
instruction format for execution on said x86- compatible microprocessor, {column 
3, lines 40-45) and wherein said single, atomic cryptographic instruction is part 
of an application program, and wherein said x86-compatible microprocessor 
executes said application program, and wherein said single, atomic cryptographic 
instruction prescribes an encryption operation, and wherein said cryptographic 
instruction prescribes that a user-generated key schedule be employed for 
execution of said encryption operation {the execution units include a plurality of 
operation blocks that correspond to different cryptographic operations that are 
used depending upon the type of instruction received in the execution queue. The 
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operation blocks correspond to cryptographic algorithms such as AES, 3DES, 
DES, andRC4) (column 9, lines 8-42; Fig 8); 

ii. A keygen unit, operatively coupled to said instruction register, configured 
to direct said x86-compatible microprocessor to load said user-generated key 
schedule (column 12, lines 7-40); and 

iii. An execution unit, operatively coupled to said keygen unit, configured to 
employ said user-generated key schedule to execute said encryption operation 
(column 9, lines 7-43), said execution unit comprising: 

A cryptography unit, configured execute a plurality of cryptographic 
rounds on each of a plurality of input text blocks to generate a 
corresponding each of a plurality of output text blocks, wherein said 
plurality of cryptographic rounds are prescribed by a control word that is 
provided to said cryptography unit (The primitive security operation 
blocks include an Advanced Encryption Standard (AES) block 807, a 
Triple Data Encryption Standard (3DES) block 809, a modular 
exponentiation block 811, a hash block 813, a simple arithmetic and logic 
block 815, and an alleged RC4.RTM. block 819) (column 9, lines 8-22). 
Kessler el al do not explicitly specify wherein said cryptographic instruction is part of an 
application program, and wherein said x86-compatible microprocessor executes said 
application program. However Christie et al disclose an apparatus and method, which 
further disclose wherein said single, atomic cryptographic instruction is part of an 
application program, and wherein said x86-compatible microprocessor executes said 
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application program( column 6, lines 38-53; column 7, lines 1 1 -22). Therefore, it would 
have been obvious to one of ordinary skill in the art at the time the invention was made to 
modify the teaching of Kessler et al such as to use the x86-compatible microprocessor to 
execute the actual application program. The motivation of doing so would have been in 
order to control interrupts in a secure execution mode capable processor as taught by 
Christie et al (abstract). 

Claim 2: Kessler et al and Christie et al disclose an apparatus for performing 
cryptographic operation as in claim 1 above, and Kessler et al further disclose wherein 
encryption operation further comprises: 

An encryption operation, said encryption operation comprising encryption of a 
plurality of plaintext blocks to generate a corresponding plurality of ciphertext 
blocks (s tep of performing cryptographic operations such encrypt operation and 
the decrypt operation) (column 7, line 54 to column 8, linelO; Fig. 5 and Fig. 8). 
Claims 4, 18 and 24: Kessler et al and Christie et al disclose an apparatus and a method 
for performing cryptographic operation as in claims 1,17 and 22 above, and Kessler et al 
further discloses , wherein said user-generated key schedule is stored in memory(F/g. 2). 
Claims 5, 19 and 25: Kessler et al and Christie et al disclose an apparatus and method for 
performing cryptographic operation as in claims 1,17 and 22 above, and Kessler et al 
further disclose, wherein said user-generated key schedule comprises an expanded key 
schedule according to the Advanced Encryption Standard (AES) algorithm (the operation 
blocks correspond to cryptographic algorithms such as AES, 3DES, DES and RC4)(Fig. 
8). 
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Claims 6, 20 and 23: Kessler et al and Christie et al disclose an apparatus and a method 
as in claims 1,17 and 22 above, and Kessler et al further disclose that said keygen unit is 
configured to interpret a key generation field within a control word, which is referenced 
by said cryptographic instruction (column 12, lines 7-33). 

Claim 8: Kessler et al and Christie et al disclose an apparatus as in claim 1 above and 
Kessler et al further disclose that said cryptographic instruction implicitly references a 
plurality of registers within said x86-compatiblemicroprocessor (execution unit) (column 
9, lines 18-40; Fig. 8). 

Claims 9-11: Kessler et al and Christie et al disclose an apparatus as in claim 8 above, 
and Kessler et al further disclose that said cryptographic instruction implicitly references 
a plurality of registers, which include a first register, wherein contents of said first 
register comprise a first pointer to a first memory address, said first memory address 
specifying a first location in memory for access of a plurality of input text blocks upon 
which said one of the cryptographic operations is to be accomplished ; and a second 
register wherein contents of said second register comprise a second pointer to a second 
memory address, said second memory address specifying a second location in said 
memory for storage of a corresponding plurality of output text blocks, said corresponding 
plurality of output text blocks being generated as a result of accomplishing said one of 
the cryptographic operations upon a plurality of input text blocks said third register 
indicate a number of text blocks within a plurality of input text blocks {each execution 
unit includes a register file block that includes data to be operated on by the 
corresponding cryptographic algorithm) (column 9, lines 18-40; Fig. 8). 
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Claim 12: Kessler et al and Christie et al disclose an apparatus as in claim 8 above, and 
further Kessler et al further disclose that said plurality of registers comprises a fourth 
register, wherein contents of said fourth register comprise a third pointer to a third 
memory address, said third memory address specifying a third location in memory for 
access of cryptographic key data for use in accomplishing said one of the cryptographic 
operations (column 9, lines 18-40; Fig. 5 and Fig. 8). 

Claim 13: Kessler et al and Christie et al disclose an apparatus and a method as in claim 
8 above, and Kessler et al further disclose that said user-generated cryptographic key 
schedule comprises said cryptographic key data (column 12, lines 8-32). 
Claim 14: Kessler et al and Christie et al disclose an apparatus as in claim 8 above, and 
Kessler ct al further disclose that said plurality of registers comprises a fifth register, 
wherein contents of said fifth register comprise a fourth pointer to a fourth memory 
address, said fourth memory address specifying a fourth location in memory, said fourth 
location comprising said initialization vector location, contents of said initialization 
vector location comprising an initialization vector or initialization vector equivalent for 
use in accomplishing said one of the cryptographic operations(cryptographic operation 
such as RC4) (column 9, lines 18-40; Fig. 5 and Fig. 8). 

Claim 15: Kessler et al and Christie et al disclose an apparatus as in claim 8 above, and 
Kessler et al further disclose that said plurality of registers comprises a sixth register, 
wherein contents of said sixth register comprise a fifth pointer to a fifth memory address, 
said fifth memory address specifying a fifth location in memory for access of a control 
word for use in accomplishing said one of the cryptographic operations, wherein said 
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control word prescribes cryptographic parameters for said one of the cryptographic 
operations, and wherein said control word comprises: a key size field (nk = key size), 
configured to specify said one of a plurality of cryptographic key sizes to be employed 
during execution of said one of the cryptographic opevations((cryptographic operation 
such as RC4) (column 9, lines 18-40; Fig. 5 and Fig. 8). The examiner notes that it is 
inherent for the control word to be stored in memory because the key expansion block 
uses it for generating a round key. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Fatoumata Traore whose telephone number is (571) 270-1685. 
The examiner can normally be reached Monday through Thursday from 7:00 a.m. to 4:00 p.m. 
and every other Friday from 7:30 a.m. to 3:30 p.m. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser G. Moazzami, can be reached on (571) 272 4195. The fax phone number for 
Formal or Official faxes to Technology Center 2100 is (571) 273-8300. Draft or Informal faxes, 
which will not be entered in the application, may be submitted directly to the examiner at (571) 
270-2685. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the Group Receptionist whose telephone number is (571) 272-2100. 

Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 
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A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Friday, January 15,2010. 
/F. T./ 

Examiner, Art Unit 2436 



/Nasser Moazzami/ 

Supervisory Patent Examiner, Art Unit 2436 



